sbomx

Software Bill of Materials · Software Supply Chain Security · License Check · Vulnerability Analysis

[sbomx @sbom_x]

Executive Order on Improving the Nation’s Cybersecurity https://t.co/BK6DbnjKQA via @whitehouse

[Python Package Index @pypi]

Incident report on malicious takeover of ctx package on PyPI has been published.

Read details, mitigation, analysis, and more at https://t.co/I7plHeqwbj

[sbomx @sbom_x]

The Open Source Software Security Mobilization Plan https://t.co/6Q0uYYsZ8Q

[Dependency-Track @DependencyTrack]

Dependency-Track v4.5.0 now available.

This release adds support for exploit prediction (EPSS), VEX, non-public vulnerabilities, and much more.

https://t.co/Jl6g80flqc

#SBOM #SaaSBOM #VEX #OWASP #CycloneDX

[Patrick Dwyer @coderpatros]

This release is pretty epic. A real game changer for organisations consuming SBOMs. Thank you @stevespringett, @nscur0, and all the contributors. #sbom

[Arnav Sahu @arnavsahu341]

Excited to share my thoughts on cloud security in Forbes: https://t.co/kkRIrWY6RR

[sbomx @sbom_x]

@albertlacambra You will always have dependencies. You just have to keep an eye on them and use as little as possible

[sbomx @sbom_x]

When will we learn? https://t.co/YX0UFyErWC "Congratulations to Rust for its first (but not its last) supply-chain attack this week!"

[Chainguard ⛓️ @chainguard_dev]

Don’t know where to start to learn more about supply chain security?

Good news! We created a Software Supply Chain Reading List

Get it 📚
https://t.co/y6ys3uIWf8

[sbomx @sbom_x]

New Typosquating Attack on npm Package ‘colors’ Using Cross-language Technique Explained https://t.co/xijRA9DTYS

[sbomx @sbom_x]

Introducing Open Source Insights data in BigQuery to help secure software supply chains @googlecloud https://t.co/hIucTodVhs "This dataset provides access to critical software supply chain information for developers, maintainers and consumers of open-source software."

[sbomx @sbom_x]

The 5×5—Reflections on trusting trust: Securing software supply chains https://t.co/IsK0klFxUv "It is like we built a digital Manhattan on a foundation of quicksand and swamps"

[Brandon Lum @lumjjb]

The Cybersecurity Coalition group has published its SBOM position paper! Check it out here. It talks about factors such as gaps in the ability to distribute and automate consumption of SBOMs, and open questions around what does SBOM mean in the cloud?

https://t.co/Dy0v0jRONF

[sbomx @sbom_x]

Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point https://t.co/5BSQnOWgZj via @theregister

[sbomx @sbom_x]

@lrvick We could go on for a long time ...

[sbomx @sbom_x]

@lrvick 3/n https://t.co/sabG4nBGcB,747
https://t.co/wO8R7q1Qqr,708
https://t.co/yeaLM5r3Qq,659
https://t.co/FSURUqyRPz,602
https://t.co/SWuw9hue5D,471
https://t.co/O8ewrQ8S4w,463
https://t.co/Nqwh5WnN0e,412
https://t.co/x7Tb1mqDvE,411
https://t.co/qLCcY6gNj7,391

[SAIM SAFDAR @cloudnativeboy]

#CloudNativeLive: Looking forward to learning, Protecting Software Supply Chains using @kyverno

Started in < 30 mint
https://t.co/YCECQV6ru1

[sbomx @sbom_x]

software supply chain security covered by Forbes https://t.co/hZFrbLzoES

[CODE WHITE GmbH @codewhitesec]

@snyksec Tnx for your excellent analysis at https://t.co/UoshhgaDgx and don't worry, the "malicious actor" is one of our interns 😎 who was tasked to research dependency confusion as part of our continuous attack simulations for clients. (1/2)